CVE-2025-6321: PHPGurukul Pre-School Enrollment System add-subadmin.php sql injection
A vulnerability has been found in PHPGurukul Pre-School Enrollment System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/add-subadmin.php. The manipulation of the argument sadminusername leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-6321?
CVE-2025-6321 is classified as a critical vulnerability.
How does CVE-2025-6321 affect the PHPGurukul Pre-School Enrollment System?
CVE-2025-6321 affects the '/admin/add-subadmin.php' file, allowing for SQL injection through the 'sadminusername' argument.
How do I fix CVE-2025-6321?
To fix CVE-2025-6321, sanitize and validate inputs to the affected functionality to prevent SQL injection.
What types of attacks can be performed due to CVE-2025-6321?
Due to CVE-2025-6321, attackers can execute arbitrary SQL queries, potentially compromising database integrity.
Is there a patch available for CVE-2025-6321?
There is currently no specific patch for CVE-2025-6321, so immediate mitigation through code changes is recommended.